$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: O3EnIOGFKCZywfwJv5A7t2bOmdkhjGO+EcWRpNQtRj4= Subject key identifier: D6:54:51:CA:A8:61:AC:C3:C2:B4:55:62:C3:E1:B3:C2:41:61:6A:ED Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 653FB978B8C013FCC348D0A0A5ABBC9BC06BABF7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: EF Signing time: Fri 20 Jun 2025 16:40:39 +0000 Manifest this update: Fri 20 Jun 2025 16:35:39 +0000 Manifest next update: Sat 21 Jun 2025 20:00:39 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: 1O7+6Pf5/x7F1AC/rA8UtEGHwHF5Cjo/8n5YaTla8Qw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3f:b9:78:b8:c0:13:fc:c3:48:d0:a0:a5:ab:bc:9b:c0:6b:ab:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Jun 20 16:35:39 2025 GMT Not After : Jun 21 20:00:39 2025 GMT Subject: CN=D65451CAA861ACC3C2B45562C3E1B3C241616AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:88:80:52:af:e7:28:f0:81:20:70:c3:2b: ea:d8:c6:08:32:c0:70:11:ea:ad:3b:14:b1:1e:2a: ef:fa:7d:96:5c:50:d9:87:9f:99:9a:1d:2d:e7:6e: d5:2c:12:0d:e8:ca:f4:ae:e2:02:8d:fe:12:20:4b: 7d:bc:a2:d2:33:64:24:f0:81:15:21:22:d1:5c:ce: 2b:33:6c:fa:15:a0:a2:4d:eb:fe:05:2e:e1:4e:02: 01:65:9c:9c:7b:15:c8:fd:d3:57:ef:aa:1f:b8:fc: 71:8d:39:10:6d:d1:52:a3:7b:04:a1:bd:7e:e4:a7: 4c:eb:8f:8f:74:32:c9:62:2f:f9:ac:4a:5a:2f:9d: 41:d1:4c:f4:b1:93:c6:2a:3e:b0:14:7d:28:7f:02: af:d1:76:58:4a:92:99:f0:3c:71:15:ac:1b:f8:03: 12:04:21:8b:f3:08:dd:74:99:61:ae:a0:4c:79:8f: 0e:0b:0c:08:3a:c7:f1:9b:63:c7:8e:b3:09:ab:18: 3b:0b:25:73:1b:9a:f0:b6:d0:1a:a3:71:fd:e0:54: fb:c4:29:f1:3e:0e:d8:06:29:24:22:bd:06:cf:01: b3:ee:4c:61:0a:5b:51:9f:21:c7:78:e4:94:56:f5: a9:79:e3:7d:66:cd:4d:c7:6a:19:9d:06:40:3d:7f: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:54:51:CA:A8:61:AC:C3:C2:B4:55:62:C3:E1:B3:C2:41:61:6A:ED X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:56:39:5e:93:51:f2:34:9c:f2:8f:74:46:f6:c4:12:82:f8: b6:f3:3a:de:96:bd:3c:42:ef:36:d4:4a:76:c9:da:52:ea:92: 1f:9d:ea:95:09:7f:bc:a0:44:b5:a5:2f:7e:64:4c:96:28:f3: 4d:2d:b0:06:f0:fe:65:bb:23:e5:2b:15:a3:cc:bc:b2:da:58: 02:0f:0c:19:95:80:23:b7:7a:ad:c2:c3:9a:e0:eb:ea:f6:1d: 52:b9:ed:bf:ca:b5:37:b0:fe:7e:70:26:0b:5b:59:7b:0c:56: af:4c:53:90:81:3c:41:05:80:57:4d:12:5c:44:94:d3:a7:1c: 57:a7:42:7b:04:8a:94:6c:b9:c5:7e:8f:9a:91:cb:81:d8:ad: b4:9a:0d:a7:3d:c4:e3:8f:6a:a5:9d:9c:84:ac:72:39:03:68: dc:14:7f:69:a5:ef:ee:be:5e:21:8c:47:03:4b:79:67:c0:db: fa:6f:74:b2:61:e8:41:08:bf:c0:e3:87:f2:f8:97:d5:0c:4d: 8d:82:1f:6f:79:e7:91:fb:af:a8:2e:cc:0e:d2:38:54:de:51: 16:47:f1:c1:af:24:21:a4:de:92:14:35:f7:5b:f7:72:10:ca: 04:7c:ab:2f:58:fd:92:4d:26:85:bc:ad:35:41:80:3b:f0:8a: 19:c2:92:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZT+5eLjAE/zDSNCgpau8m8Brq/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTA2MjAxNjM1MzlaFw0yNTA2MjEyMDAwMzlaMDMxMTAvBgNV BAMTKEQ2NTQ1MUNBQTg2MUFDQzNDMkI0NTU2MkMzRTFCM0MyNDE2MTZBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIEIiAUq/nKPCBIHDDK+rYxggy wHAR6q07FLEeKu/6fZZcUNmHn5maHS3nbtUsEg3oyvSu4gKN/hIgS328otIzZCTw gRUhItFcziszbPoVoKJN6/4FLuFOAgFlnJx7Fcj901fvqh+4/HGNORBt0VKjewSh vX7kp0zrj490MsliL/msSlovnUHRTPSxk8YqPrAUfSh/Aq/RdlhKkpnwPHEVrBv4 AxIEIYvzCN10mWGuoEx5jw4LDAg6x/GbY8eOswmrGDsLJXMbmvC20Bqjcf3gVPvE KfE+DtgGKSQivQbPAbPuTGEKW1GfIcd45JRW9al5431mzU3HahmdBkA9f4AtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1lRRyqhhrMPCtFViw+GzwkFhau0wHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlY5XpNR8jSc8o90RvbEEoL4tvM63pa9PELvNtRKdsnaUuqSH53qlQl/vKBE taUvfmRMlijzTS2wBvD+Zbsj5SsVo8y8stpYAg8MGZWAI7d6rcLDmuDr6vYdUrnt v8q1N7D+fnAmC1tZewxWr0xTkIE8QQWAV00SXESU06ccV6dCewSKlGy5xX6PmpHL gdittJoNpz3E449qpZ2chKxyOQNo3BR/aaXv7r5eIYxHA0t5Z8Db+m90smHoQQi/ wOOH8viX1QxNjYIfb3nnkfuvqC7MDtI4VN5RFkfxwa8kIaTekhQ191v3chDKBHyr L1j9kk0mhbytNUGAO/CKGcKSJA== -----END CERTIFICATE-----Generated at Fri Jun 20 23:09:54 2025 by rpki-client